$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: VtKmUq0liisCZluyYQKM3kbL5jcfuiDG8gqKxRVlrKc= Subject key identifier: 6F:F3:D2:52:17:D1:96:FD:7E:69:CF:99:FC:4D:67:33:4D:9F:DF:99 Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 0479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 0472 Signing time: Sat 14 Jun 2025 23:49:49 +0000 Manifest this update: Sat 14 Jun 2025 23:49:48 +0000 Manifest next update: Sat 21 Jun 2025 23:49:48 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: xQv/B+jcKLCtUl6D6bFf7AD6rb0/U0qLPPhhZFp1lyw=) 2: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: qTXBNw7mfhaErKZnovnNFuD402t8u0aLC3Cx70bCvCg=) 3: E097013E910C11EFB994E187C4F9AE02.roa (hash: 6iwr6VYb5feSdMcufjsCe6jPARf4GSvhQnloLGq2csk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1145 (0x479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: Jun 14 23:49:48 2025 GMT Not After : Jun 21 23:49:48 2025 GMT Subject: CN=684e0a9c-df42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:de:dd:da:47:d3:cf:f1:91:3c:7c:46:96:b8: 91:d5:ed:92:ce:c4:81:46:84:27:f2:cf:05:64:b9: b6:41:e7:13:c4:95:73:c0:04:01:d6:35:0e:18:fa: 61:5a:0a:f6:82:e4:00:e8:0a:ce:3c:3e:50:5c:6e: 5d:43:28:32:bf:9a:4d:64:8a:2f:67:0c:57:fb:4f: 08:60:f6:03:3e:15:e7:8d:fc:db:76:4e:56:82:4e: 13:a4:53:36:35:70:e6:7e:ff:ae:39:7e:29:12:cf: a5:77:2d:b2:58:af:36:6b:18:3a:7a:ce:4b:19:bd: 3b:4b:67:26:ee:c2:8a:d0:a4:68:c7:66:d6:b7:e4: 19:85:39:74:f3:5f:cc:3a:6c:e6:d4:f0:82:60:e6: 69:d0:0f:a7:f9:e3:13:e0:0f:a4:e5:fc:87:79:26: 86:f8:9e:54:8e:43:20:e0:4d:c0:5a:f1:8e:3a:e3: b3:ea:c1:ae:28:e9:e5:e7:1c:17:4f:f7:1f:81:fb: f1:52:f0:a8:75:eb:6b:fb:d8:50:1e:e7:dc:9a:b9: 8d:e7:91:aa:3f:fd:2d:20:fe:b9:70:72:db:6c:be: b5:7a:23:86:41:f3:84:1e:d7:5c:0b:6e:29:7e:ec: b2:db:6a:a0:a3:4a:36:4b:29:fd:84:04:e5:7b:73: 0a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F3:D2:52:17:D1:96:FD:7E:69:CF:99:FC:4D:67:33:4D:9F:DF:99 X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:57:17:fc:29:7a:64:3e:a3:01:54:77:2c:cb:e9:a8:31:40: 1c:3b:11:bb:0f:01:86:06:96:bb:53:08:ea:10:2c:7a:be:14: 71:ff:14:d6:b4:25:a4:99:e3:59:6f:db:16:73:cf:07:0c:b3: c4:4b:f4:dc:c8:23:93:0e:7c:45:70:28:ea:e9:05:6e:f0:ff: c8:00:41:05:4f:46:28:93:56:8a:85:f9:e6:59:fe:19:9f:49: 2c:b6:b6:9c:b5:7c:7e:0f:8e:e2:8d:15:06:27:02:45:cc:ca: e9:e2:ba:59:ba:7e:36:c1:95:fa:4c:dc:2d:84:93:a4:de:0c: bc:f6:e1:43:e1:ca:d2:7c:20:6e:d0:6c:c6:c3:00:91:80:44: 15:52:3e:bb:9a:84:05:d8:26:7b:27:e2:95:7e:c1:27:e2:23: e3:9d:aa:26:67:51:e2:26:f6:4c:40:ff:91:08:9f:dc:3b:28: dc:73:38:dd:37:5a:3a:fd:e3:fe:07:5a:ad:22:43:90:3e:38: c1:0e:6f:d5:bc:77:f8:fe:25:e3:68:90:01:7a:1c:76:4b:50: 24:98:0c:84:31:da:e9:a2:bc:96:0e:2e:7d:ef:0c:e2:0f:b4: 9c:e8:ad:80:11:5d:e9:2e:8a:fe:7e:30:3c:aa:1a:a8:5f:76: ef:bc:ef:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjUwNjE0MjM0OTQ4WhcNMjUwNjIxMjM0OTQ4WjAYMRYwFAYD VQQDEw02ODRlMGE5Yy1kZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn97d2kfTz/GRPHxGlriR1e2SzsSBRoQn8s8FZLm2QecTxJVzwAQB1jUOGPph Wgr2guQA6ArOPD5QXG5dQygyv5pNZIovZwxX+08IYPYDPhXnjfzbdk5Wgk4TpFM2 NXDmfv+uOX4pEs+ldy2yWK82axg6es5LGb07S2cm7sKK0KRox2bWt+QZhTl081/M Omzm1PCCYOZp0A+n+eMT4A+k5fyHeSaG+J5UjkMg4E3AWvGOOuOz6sGuKOnl5xwX T/cfgfvxUvCodetr+9hQHufcmrmN55GqP/0tIP65cHLbbL61eiOGQfOEHtdcC24p fuyy22qgo0o2Syn9hATle3MKrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/z0lIX 0Zb9fmnPmfxNZzNNn9+ZMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzVxf8KXpkPqMBVHcsy+moMUAcOxG7DwGGBpa7UwjqECx6vhRx/xTW tCWkmeNZb9sWc88HDLPES/TcyCOTDnxFcCjq6QVu8P/IAEEFT0Yok1aKhfnmWf4Z n0kstractXx+D47ijRUGJwJFzMrp4rpZun42wZX6TNwthJOk3gy89uFD4crSfCBu 0GzGwwCRgEQVUj67moQF2CZ7J+KVfsEn4iPjnaomZ1HiJvZMQP+RCJ/cOyjcczjd N1o6/eP+B1qtIkOQPjjBDm/VvHf4/iXjaJABehx2S1AkmAyEMdrporyWDi597wzi D7Sc6K2AEV3pLor+fjA8qhqoX3bvvO83 -----END CERTIFICATE-----Generated at Sun Jun 15 08:37:31 2025 by rpki-client